Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (322875 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2014-4609 1 Libav 1 Libav 2024-11-21 8.8 High
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.
CVE-2014-4607 2 Oberhumer, Redhat 3 Liblzo2, Lzo2, Enterprise Linux 2024-11-21 8.8 High
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
CVE-2014-4592 1 Czepol 1 Wp-planet 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVE-2014-4567 1 Videowhisper 1 Video Comments Webcam Recorder 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVE-2014-4561 1 Ultimate-weather Project 1 Ultimate-weather 2024-11-21 6.1 Medium
The ultimate-weather plugin 1.0 for WordPress has XSS
CVE-2014-4559 1 Cybercompay 1 Swipehq-payment-gateway-wp-e-commerce 2024-11-21 6.1 Medium
Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) api_key, (2) payment_page_url, (3) merchant_id, (4) api_url, or (5) currency parameter.
CVE-2014-4558 1 Cybercompany 1 Swipehq-payment-gateway-woocommerce 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
CVE-2014-4553 1 Spreadshirt-rss-3d-cube-flash-gallery Project 1 Spreadshirt-rss-3d-cube-flash-gallery 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters.
CVE-2014-4550 1 Visualshortcodes 1 Ninja 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.
CVE-2014-4548 1 Ruven-toolkit Project 1 Ruven-toolkit 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.
CVE-2014-4544 1 Podcast Channels Project 1 Podcast Channels 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php.
CVE-2014-4539 1 Movies Project 1 Movies 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
CVE-2014-4536 1 Katz 1 Infusionsoft Gravity Forms 2024-11-21 6.1 Medium
Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) go, (2) contactId, or (3) campaignId parameter.
CVE-2014-4535 1 Import Legacy Media Project 1 Import Legacy Media 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
CVE-2014-4530 1 Flog Project 1 Flog 2024-11-21 6.1 Medium
flog plugin 0.1 for WordPress has XSS
CVE-2014-4525 1 Winwar 1 Wp Ebay Product Feeds 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.
CVE-2014-4523 1 Easy Career Openings Project 1 Easy Career Openings 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2014-4519 1 Conversador Project 1 Conversador 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter.
CVE-2014-4198 1 Bssys 1 Rbs Bs-client. Retail Client 2024-11-21 9.1 Critical
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function.
CVE-2014-4196 1 Bssys 1 Rbs Bs-client 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allows remote attackers to inject arbitrary web script or HTML via the colorstyle parameter.